CVE Vulnerabilities

CVE-2024-38044

Incorrect Conversion between Numeric Types

Published: Jul 09, 2024 | Modified: Jul 11, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

DHCP Server Service Remote Code Execution Vulnerability

Weakness

When converting from one data type to another, such as long to integer, data can be omitted or translated in a way that produces unexpected values. If the resulting values are used in a sensitive context, then dangerous behaviors may occur.

Affected Software

Name Vendor Start Version End Version
Windows_server_2012 Microsoft - (including) - (including)
Windows_server_2012 Microsoft r2 (including) r2 (including)
Windows_server_2016 Microsoft * 10.0.14393.7159 (excluding)
Windows_server_2019 Microsoft * 10.0.17763.6054 (excluding)
Windows_server_2022 Microsoft * 10.0.20348.2582 (excluding)
Windows_server_2022_23h2 Microsoft * 10.0.25398.1009 (excluding)

Potential Mitigations

References